Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
File:                     TPLdZtykL-r2DDjnaVsDtD5-ets.mft (raw, json)
Hash identifier:          TGCXNWEpt/xiBe0E4Bp6VGyiJcSAdeyf3N+mTiF/RFs=
Subject key identifier:   89:5B:CD:0E:DE:99:1F:34:69:E8:FE:A0:C9:98:66:C8:3D:02:07:81
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Certificate issuer:       /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial:       0CDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
Manifest number:          0CC4
Signing time:             Fri 22 Aug 2025 18:17:50 +0000
Manifest this update:     Fri 22 Aug 2025 18:17:50 +0000
Manifest next update:     Fri 29 Aug 2025 18:17:50 +0000
Files and hashes:         1: TPLdZtykL-r2DDjnaVsDtD5-ets.crl (hash: cmeut8WKBLw7Q1K9EEqg9OZYCaC/rbeMK5yM3foOb1w=)
                          2: 5630809A81B311EB9661A516C4F9AE02.roa (hash: ZttxHWyqYC+cKd0BdILvShFdkBjr28lgBuZeDhgrwKk=)
                          3: DF56C74C83A111EE8D40867CC4F9AE02.roa (hash: h7HweR/FfeHA80OZjTVSE+4DMIspzsFe+SSvbL7FG+c=)
                          4: 4C65E804F68911E98EF88758C4F9AE02.roa (hash: nVclf58inHRItWEODJ4FKUnmAP+f1Uxv1S86KdkjVqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
                          rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3293 (0xcdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
        Validity
            Not Before: Aug 22 18:17:50 2025 GMT
            Not After : Aug 29 18:17:50 2025 GMT
        Subject: CN=68a8b44e-9086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:f8:95:5e:8d:e8:82:c1:58:84:1b:2d:ca:
                    f0:cc:64:c2:2c:28:2b:23:88:0f:df:bf:35:bb:4b:
                    3e:9e:00:e0:d5:da:1a:10:d1:0a:30:ab:52:4d:4f:
                    43:99:83:1b:2b:22:3f:26:ba:37:7a:36:6a:e5:e5:
                    ae:e4:46:c8:d5:13:46:c3:a4:25:8f:7c:36:95:17:
                    86:c8:96:33:be:e4:e1:f6:e4:78:7a:93:e8:7e:ee:
                    3f:b9:07:07:11:ca:f0:3d:11:90:42:99:fc:b9:34:
                    6a:87:74:d0:46:5a:10:55:95:99:ec:57:9b:90:09:
                    ea:4a:ff:6b:45:82:91:de:33:1b:b9:0d:ce:8a:55:
                    d0:bb:3f:66:31:60:62:14:d4:ae:1f:d6:3e:c9:dc:
                    d9:1d:6b:b4:d7:15:77:e3:6a:db:58:c0:94:02:b9:
                    ed:6c:f2:f0:b2:d5:96:ba:64:65:6a:e1:07:fe:a0:
                    f2:a0:53:50:96:60:a9:ee:b6:cb:19:b5:33:fb:a2:
                    d9:12:04:1d:f9:4b:f1:2a:92:80:1a:13:98:6a:1b:
                    68:d9:1c:ec:91:22:45:ea:55:4f:13:8e:06:9f:e3:
                    2e:83:2c:c5:92:a8:00:11:ab:ac:c6:21:0c:dc:aa:
                    4c:d0:74:b9:f6:fa:0a:bf:7b:14:33:32:a3:9e:45:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5B:CD:0E:DE:99:1F:34:69:E8:FE:A0:C9:98:66:C8:3D:02:07:81
            X509v3 Authority Key Identifier:
                keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:bd:f0:a9:4b:2a:d3:e6:96:2b:49:40:92:b3:09:4a:8b:97:
         09:3d:6f:d6:f4:91:62:f5:8f:ca:50:03:d3:a2:12:6b:ef:3c:
         e5:91:56:6f:cf:c4:ed:77:03:77:c5:2b:3d:8c:58:65:e2:3e:
         f7:cc:2b:a8:6d:47:ee:a2:72:48:98:d2:c9:6a:d0:50:48:15:
         c3:78:a4:ec:8f:5e:cf:07:1e:02:07:d5:5d:d9:00:4d:6d:77:
         58:3a:10:31:b8:34:69:39:1f:32:25:bd:d2:8a:ca:d6:1e:65:
         7f:54:1e:e8:aa:23:43:06:f0:79:9d:e5:39:e2:8e:53:4c:2f:
         75:9c:3c:98:f4:49:f8:f4:e9:4d:18:fc:5b:9c:70:e1:e1:93:
         59:22:90:d7:9b:86:1a:a2:e0:c4:e1:44:97:d8:f5:04:2e:0c:
         a6:7c:94:59:3e:6d:d9:0a:81:65:a1:03:c2:a7:78:13:18:4a:
         9a:d2:6c:66:3f:4c:9a:99:8e:13:85:5c:91:dc:5f:42:44:84:
         b4:a7:9c:34:05:30:a3:62:65:34:21:7a:e7:86:5c:89:46:90:
         76:6c:59:e9:7e:f3:3e:5c:d0:20:ed:bb:1d:0a:82:d1:0e:20:
         87:2e:e7:37:5b:2f:ea:66:f0:48:30:24:1c:a5:3f:b4:59:56:
         27:7b:34:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:39 2025 by rpki-client